Can HTTP header informatin be used for logging in?  We are trying to use the SA to front a web serivice and want application to be able to login and access the resource without being prompted with a login page. We do want to challenge the application via username and password but not use certificates. ... View more